Privacy Policy & Data Protection Statement

1. Data Controller & Corporate Identification

This website (LiliSystemswork) and its associated electronic communications, software engineering, consulting, and computing infrastructure services are operated by LiliSystemswork OÜ, a private limited company registered in the Republic of Estonia and acting as the Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR).

2. Categories of Processed Data & Legal Basis

In the delivery of our electronic communications, computer programming, consulting, and data processing services, personal and technical data processing is strictly limited to what is necessary under Article 6(1)(b), (c), and (f) of the GDPR:

• Business & Technical Inquiries (Art. 6(1)(b) GDPR): Full name, corporate email address, organization details, and technical project specifications voluntarily submitted through our inquiry forms or direct correspondence.
• Network & Infrastructure Telemetry (Art. 6(1)(f) GDPR): IP routing headers, packet transit timestamps, system health metrics, and security diagnostic logs required to maintain service level agreements (SLA), prevent unauthorized access, and mitigate network anomalies.
• Contractual & Statutory Records (Art. 6(1)(c) GDPR): Corporate invoicing, commercial agreements, and compliance documentation retained in accordance with the Estonian Accounting Act and commercial regulations.

3. Confidentiality & Non-Disclosure

All client proprietary software architectures, communication routing topologies, and computing workloads processed by LiliSystemswork OÜ are governed by strict confidentiality obligations. We do not sell, lease, or monetize personal data or client operational telemetry to third parties. Data is disclosed only to authorized infrastructure sub-processors under binding Data Processing Agreements (DPA) or when mandated by competent Estonian or European Union authorities.

4. Data Security & Retention Periods

We implement physical, cryptographic, and organizational safeguards across all processing systems, including TLS 1.3 transport encryption, AES-256 storage encryption, isolated tenant environments, and role-based access control. Technical inquiry records are retained only for the duration of pre-contractual or contractual cooperation, and statutory accounting records are retained for 7 years as required by Estonian law.

5. Rights of Data Subjects under GDPR

Under Articles 15–22 of the GDPR, data subjects have the right to request access to their personal data, rectification of inaccurate data, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing based on legitimate interests. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).